-
Improvement
-
Resolution: Fixed
-
Minor
-
3.8
-
MOODLE_38_STABLE
-
MOODLE_38_STABLE
-
MDL-67076-master -
-
H5P Sprint Relase 3.8
Dani Palou has raised this issue:
When the embed.php file is opened in a browser where the user is not logged in, an error is displayed, instead of redirecting the user to the login page.
The mobile app won't have a Moodle web session in the iframe. It has a script to auto-login the user in the iframe, but it has some limitations (e.g. it only works in https sites) so it'd be nice if the user can authenticate manually inside the iframe if we cannot authenticate him automatically.
A new parameter will be added to the embed to let the app to use it to redirect (instead of display the error).
- Testing discovered
-
MDL-67082 embed.php lets you play "restricted" h5p files without being authenticated
-
- Closed
-